Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/08334ad91ce532da45c25b1552700e33b4fdb13b.roa
File: 08334ad91ce532da45c25b1552700e33b4fdb13b.roa (raw, json)
Hash identifier: D217vF4OAlGeNj6AQp9+PjKhpqSb3BK5E7t4WZ1Fji0=
Subject key identifier: 35:57:BA:2B:3E:F8:99:72:E6:DB:B8:4D:30:E7:4A:11:0A:67:D1:C7
Certificate issuer: /CN=ab3a4acea64b174081cdabbb007d6cd03d2a7357
Certificate serial: 1AA7F9
Authority key identifier: E8:1A:EB:82:B0:71:50:0D:66:FD:34:9A:BA:13:AF:C0:FF:01:84:14
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab3a4acea64b174081cdabbb007d6cd03d2a7357.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/08334ad91ce532da45c25b1552700e33b4fdb13b.roa
Signing time: Mon 07 Aug 2023 12:38:27 +0000
ROA not before: Sun 06 Aug 2023 12:38:27 +0000
ROA not after: Thu 07 Aug 2025 12:38:27 +0000
asID: 52398
IP address blocks: 200.7.148.0/22 maxlen: 24
168.121.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1746937 (0x1aa7f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab3a4acea64b174081cdabbb007d6cd03d2a7357
Validity
Not Before: Aug 6 12:38:27 2023 GMT
Not After : Aug 7 12:38:27 2025 GMT
Subject: CN=08334ad91ce532da45c25b1552700e33b4fdb13b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:81:f5:b8:f5:28:08:7d:9e:1f:86:70:08:77:
47:78:c4:3c:c6:9b:32:3d:f5:16:39:04:ff:cf:51:
7e:3a:bc:d8:a8:df:ab:5b:b2:5f:fe:f2:41:06:1f:
22:88:2b:2f:2d:89:c8:0e:93:1b:0a:23:0c:7e:c4:
ae:d2:de:82:4a:e1:48:0c:be:41:4c:c2:33:f5:6e:
93:e1:db:81:d0:c5:c8:5e:19:89:32:b3:f5:bc:ab:
d5:cd:0f:ea:c3:c0:2e:b1:94:a8:c5:bc:0a:77:f7:
25:3f:be:f3:21:b2:67:7b:d3:5f:81:a4:74:bb:cf:
1a:2e:4c:10:a5:e8:c0:cf:11:85:4e:b7:42:4e:c6:
f5:c1:59:f4:a2:e9:2c:1b:0b:f1:64:ae:6f:8f:10:
14:87:32:46:d4:45:b7:f3:df:d7:ed:8c:83:ea:b3:
60:05:67:b2:9a:09:8f:de:85:7f:82:2d:9b:f0:53:
10:b6:25:6e:b5:eb:3d:f3:f4:ef:ca:a8:1e:2a:0a:
09:ea:07:ed:cf:64:05:c9:51:19:31:66:63:c5:d1:
35:f0:13:dc:96:e0:57:f2:7c:b5:0e:77:ce:8a:0e:
e9:27:2c:a0:f2:d7:1e:55:41:b3:dc:43:9e:4e:64:
33:60:2b:ca:99:4d:ce:73:d6:65:42:0d:ec:41:f7:
43:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:57:BA:2B:3E:F8:99:72:E6:DB:B8:4D:30:E7:4A:11:0A:67:D1:C7
X509v3 Authority Key Identifier:
keyid:E8:1A:EB:82:B0:71:50:0D:66:FD:34:9A:BA:13:AF:C0:FF:01:84:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab3a4acea64b174081cdabbb007d6cd03d2a7357.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/08334ad91ce532da45c25b1552700e33b4fdb13b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/ab3a4acea64b174081cdabbb007d6cd03d2a7357.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.84.0/22
200.7.148.0/22
Signature Algorithm: sha256WithRSAEncryption
43:af:50:5f:91:0c:cf:f4:85:57:9e:37:cc:07:fc:e5:90:40:
da:43:ee:0c:98:a9:24:44:3d:35:d4:0d:a8:90:e9:1e:08:0b:
8f:1d:d6:14:c3:5a:6e:49:e2:74:c3:27:39:3e:d6:45:9b:f0:
9f:3e:91:a6:bc:93:01:dd:9b:ed:73:d8:0a:25:63:87:89:04:
a9:0a:f1:a0:ab:ac:98:f3:04:6a:73:47:fe:93:ec:1c:f2:f0:
eb:23:5c:39:b2:f4:a4:c7:3f:82:8a:1d:21:5a:e3:fd:38:10:
33:f3:1f:77:99:1a:bb:16:0d:40:90:18:9e:db:b1:e2:dc:a2:
f8:e8:26:ed:f9:a8:06:48:d0:95:01:ee:66:8a:19:ef:cb:f2:
23:67:7d:60:29:93:1c:3d:41:82:81:42:66:2f:a7:37:b7:cf:
0b:81:1c:f1:ad:43:db:86:33:cf:80:23:b6:f9:18:ed:99:f7:
5f:5b:5a:05:28:94:00:8f:7e:a7:7e:e8:b9:11:1f:9a:be:af:
5c:7d:c9:8b:e0:57:20:35:20:7b:25:37:1f:3d:55:b8:2a:2c:
f0:6e:d6:70:81:aa:a0:9b:3d:65:52:58:70:5d:b7:e1:a4:56:
22:94:e3:7a:c4:44:2f:92:0a:c2:64:25:ae:40:21:ef:31:3f:
8b:24:ed:69
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDGqf5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFi
M2E0YWNlYTY0YjE3NDA4MWNkYWJiYjAwN2Q2Y2QwM2QyYTczNTcwHhcNMjMwODA2
MTIzODI3WhcNMjUwODA3MTIzODI3WjAzMTEwLwYDVQQDEygwODMzNGFkOTFjZTUz
MmRhNDVjMjViMTU1MjcwMGUzM2I0ZmRiMTNiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqoH1uPUoCH2eH4ZwCHdHeMQ8xpsyPfUWOQT/z1F+OrzYqN+r
W7Jf/vJBBh8iiCsvLYnIDpMbCiMMfsSu0t6CSuFIDL5BTMIz9W6T4duB0MXIXhmJ
MrP1vKvVzQ/qw8AusZSoxbwKd/clP77zIbJne9NfgaR0u88aLkwQpejAzxGFTrdC
Tsb1wVn0ouksGwvxZK5vjxAUhzJG1EW389/X7YyD6rNgBWeymgmP3oV/gi2b8FMQ
tiVutes98/TvyqgeKgoJ6gftz2QFyVEZMWZjxdE18BPcluBX8ny1DnfOig7pJyyg
8tceVUGz3EOeTmQzYCvKmU3Oc9ZlQg3sQfdDSwIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFDVXuis++Jly5tu4TTDnShEKZ9HHMB8GA1UdIwQYMBaAFOga64KwcVANZv00
mroTr8D/AYQUMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWIzYTRh
Y2VhNjRiMTc0MDgxY2RhYmJiMDA3ZDZjZDAzZDJhNzM1Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOGRmM2U5NGYtYjNjYy00ZTY0LThlNTktN2U4NTMy
MjI5MWQyLzA4MzM0YWQ5MWNlNTMyZGE0NWMyNWIxNTUyNzAwZTMzYjRmZGIxM2Iu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84ZGYzZTk0Zi1iM2NjLTRlNjQtOGU1OS03ZTg1
MzIyMjkxZDIvYWIzYTRhY2VhNjRiMTc0MDgxY2RhYmJiMDA3ZDZjZDAzZDJhNzM1
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAqh5VAMEAsgHlDANBgkqhkiG9w0BAQsFAAOCAQEAQ69QX5EM
z/SFV543zAf85ZBA2kPuDJipJEQ9NdQNqJDpHggLjx3WFMNabknidMMnOT7WRZvw
nz6RpryTAd2b7XPYCiVjh4kEqQrxoKusmPMEanNH/pPsHPLw6yNcObL0pMc/good
IVrj/TgQM/Mfd5kauxYNQJAYntux4tyi+Ogm7fmoBkjQlQHuZooZ78vyI2d9YCmT
HD1BgoFCZi+nN7fPC4Ec8a1D24Yzz4AjtvkY7Zn3X1taBSiUAI9+p37ouREfmr6v
XH3Ji+BXIDUgeyU3Hz1VuCos8G7WcIGqoJs9ZVJYcF234aRWIpTjesREL5IKwmQl
rkAh7zE/iyTtaQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:40 2024 by rpki-client on console-ams.rpki-client.org